CVE-2017-1000220

The CVE-2017-1000220 entry concerns the pidusage library (version ≤ 1.1.4). The connected sources confirm that pidusage passes unsanitized input to child_process.exec(), enabling arbitrary command execution (command injection) in the ps-related functionality. Affected platforms include Darwin, Su...

CVE-2017-1000220: Improper Neutralization of Special Elements used in an OS Command

soyuka/pidusage =1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution...